Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: HTTP Header Usage Statistics - Internet Security | DShield HTTP Header Usage Statistics


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

This is a continuation of work started by Brough Davis as part of his software security project for his Masters in Information Security Engineering. The main goal of this project is to find how many sites use security relevant headers, like for example the X-XSS-Protection or X-Frame-Options headers.

Below you will find a table/histogram showing how many times we found each header (security relevant or not). We access the index page of each site using a "head" request. The list of sites is derived from Alexa's Top 1 Million sites. We try to poll as many sites as possible each day.

As we collect more data, we will plot changes over time.



All Headers Active In The Past Month
Header Popularity
Date
Content-Type
Server
Set-Cookie
Connection
Cache-Control
Vary
X-Powered-By
Expires
Content-Length
Last-Modified
Pragma
Link
Accept-Ranges
ETag
X-Content-Type-Options
X-Frame-Options
X-XSS-Protection
Strict-Transport-Security
CF-RAY
X-Cache
X-AspNet-Version
Age
Content-Language
X-Pingback
P3P
Via
X-UA-Compatible
Upgrade
Expect-CT
Access-Control-Allow-Origin
X-Adblock-Key
Content-Security-Policy
X-Check
X-Language
X-Template
X-Cacheable
X-Varnish
Alt-Svc
X-Generator
X-Buckets
X-Drupal-Cache
X-Xss-Protection
P3p
Referrer-Policy
X-Request-Id
X-Type
WPE-Backend
X-Cache-Group
X-Pass-Why
X-AspNetMvc-Version
X-Hacker
X-Ac
X-Cache-Hits
X-Permitted-Cross-Domain-Policies
X-Powered-By-Plesk
X-Download-Options
Host-Header
Content-Location
MS-Author-Via
X-ShopId
X-Runtime
X-Sorting-Hat-ShopId-Cached
X-Sorting-Hat-FeatureSet
X-Dc
X-Sorting-Hat-ShopId
X-ShardId
X-Sorting-Hat-Section
X-Sorting-Hat-PodId-Cached
X-Sorting-Hat-PodId
X-Sorting-Hat-PrivacyLevel
X-Alternate-Cache-Key
X-UA-Device
X-Powered-CMS
X-IPLB-Instance
X-FRAME-OPTIONS
X-Served-By
X-Request-ID
Cartoon
Access-Control-Allow-Headers
Access-Control-Allow-Methods
X-Amz-Cf-Id
Access-Control-Allow-Credentials
X-Cache-Status
Status
X-Via
X-Wix-Server-Artifact-Id
X-Accel-Buffering
X-Iinfo
X-Timer
X-TEC-API-VERSION
X-TEC-API-ORIGIN
X-TEC-API-ROOT
CF-Cache-Status
X-ServedBy
X-Contextid
X-Mod-Pagespeed
X-Backend
X-PC-Key
X-PC-Hit
Powered-By
X-CST
X-PC-Host
X-PC-Date
X-PC-AppVer
Content-Encoding
X-Host
X-WPE-Loopback-Upstream-Addr
X-Logged-In
X-Server
X-DIS-Request-ID
X-CDN
Keep-Alive
X-Cache-Hit
X-Rid
X-Port
X-Tumblr-Pixel-0
X-Tumblr-Pixel
X-Tumblr-User
X-Endurance-Cache-Level
X-Cache-Enabled
X-Server-Powered-By
X-Tumblr-Pixel-1
X-NewRelic-App-Data
X-Accel-Version
X-Ua-Compatible
X-Original-Date
X-Nginx-Cache-Status
X-Robots-Tag
X-Drupal-Dynamic-Cache
X-Seen-By
X-Wix-Request-Id
X-Wix-Punisher
X-Turbo-Charged-By
X-Page-Speed
X-Tumblr-Pixel-2
X-Forwarded-For
X-Content-Powered-By
X-Proxy-Cache
X-Forwarded-Proto
X-AH-Environment
X-Content-Digest
X-Pad
X-Styx-Req-Id
X-Pantheon-Styx-Hostname
X-Varnish-Cache
X-LiteSpeed-Cache
WP-Super-Cache
Content-Security-Policy-Report-Only
X-Rack-Cache
X-Request-Country
X-GitHub-Request-Id
SPRequestGuid
X-Tumblr-Pixel-3
Edge-Control
X-MS-InvokeApp
X-XRDS-Location
X-SharePointHealthScore
X-Cache-Lookup
MicrosoftSharePointTeamServices
X-Cnection
Timing-Allow-Origin
X-Node
X-FW-Hash
X-Content-Security-Policy
Cf-Railgun
X-FW-Type
X-FW-Static
X-FW-Serve
X-Amz-Request-Id
X-Amz-Id-2
X-Died
Request-Id
Charset
X-Trace
X-FullPageCaching
X-Webcom-Cache-Status
X-Hits
Request-Context
X-PhApp
Edge-Cache-Tag
X-HS-Cache-Config
X-HS-Content-Id
X-BC-Stapler
X-CF-Powered-By
SPIisLatency
MicrosoftOfficeWebServer
SPRequestDuration
X-PHP-Backend
X-INKT-SITE
X-INKT-URI
Composed-By
Access-Control-Expose-Headers
X-Webserver
Access-Control-Max-Age
X-Newrelic-App-Data
X-Swift-SaveTime
X-Swift-CacheTime
EagleId
X-Safe-Firewall
Grace
X-Spip-Cache
Served-By
X-CDN-Pop
X-CDN-Pop-IP
X-Fastly-Request-ID
X-Backend-Server
X-Hyper-Cache
X-SERVER
X-Dw-Request-Base-Id
Liferay-Portal
X-VCache
X-Firenze-Processing-Times
X-Tumblr-Pixel-4
X-Device
X-Server-Name
X-StackifyID
X-FB-Debug
X-Microcache
Surrogate-Control
X-SS-Conf
X-SS-Location
X-LiteSpeed-Cache-Control
Front-End-Https
X-Cloud-Trace-Context
Xkey
Content-Style-Type
X-DNS-Prefetch-Control
X-Clacks-Overhead
Content-Script-Type
X-RateLimit-Remaining
X-TNCMS
X-Loop
Public-Key-Pins
X-RateLimit-Limit
Rating
X-XN-XNHTML
X-XN-Trace-Token
X-HS-Combine-CSS
X-RateLimit-Reset
X-Jimdo-Instance
X-Jimdo-Wid
X-DDC-Arch-Trace
X-Acc-Exp
X-Vtex-Processado-Em
X-Age
Refresh
X-WebKit-CSP
X-User-Agent
Fpc-Cache-Id
X-Cache-Config
X-Px
X-Dscp-Value
X-N-OperationId
X-ServerName
Response
X-Middleton-Response
X-Middleton-Display
X-Sol
Display
X-Hostname
X-Cached
X-Topify-Platform
X-Generated-By
X-Correlation-Id
X-Url
X-Zen-Fury
X-Tumblr-Content-Rating
X-Kinsta-Cache
X-MiniProfiler-Ids
TCN
X-Request-Time
X-Outils-CS
X-Tumblr-Pixel-5
X-Magento-Tags
P-WS
X-Handled-By
P-LB
Dmn
X-OneAgent-JS-Injection
X-Loopia-Node
X-B-Cache
X-Whom
X-Amz-Version-Id
X-DynaTrace
X-CMS-Version
X-Msg-2-Log
Edge-Control-Message
X-Content-Options
PageSpeed
X-From
X-Cached-By
Rt-Fastcgi-Cache
X-Debug-Info
ServedBy
Imagetoolbar
X-DynaTrace-JS-Agent
X-Ruxit-JS-Agent
Access-Control-Request-Method
X-Edge-Location
X-LBLID
X-Varnish-TTL
Powered
Public-Key-Pins-Report-Only
X-Varnish-Cache-Hits
X-CacheServer
Host
X-Fastcgi-Cache
X-AspNetWebPages-Version
X-Location-Id
X-Cluster-Node
Product
DynaTrace
X-Cache-Rule
X-Signature
X-Shard
Surrogate-Key
X-VTEX-Cache-Status-Janus-ApiCache
X-Vtex-Processed-At
X-Vtex-Remote-Cache
X-VTEX-Janus-Router-Backend-App
X-Upstream
X-FORWARDED-FOR
X-NWS-LOG-UUID
X-URL
X-Powered-By-VTEX-Janus-ApiCache
No
X-Original-Request
X-Returned-From
X-Umbraco-Version
X-Passed-To
X-Actual-URL
X-Passed-To-DLL
X-Returned-From-DLL
X-Passed-To-PostProcessResponse
X-Returned-From-PostProcessResponse
X-Returned-From-BeforeDispatch
X-Passed-To-BeforeDispatch
X-Goog-Hash
X-Art-Request-Id
X-Recruiting
X-Accel-Expires
X-SRCache-Fetch-Status
X-SRCache-Store-Status
Alternate-Protocol
X-F-Cache
X-Varnish-Beresp-Status
X-Via-JSL
X-Varnish-Beresp-Ttl
X-Varnish-Beresp-Grace
X-Stale
X-Platform-Processor
X-Platform
Retry-After
X-Version
X-Platform-Router
X-Engine
X-Micro-Cache
Fhost
X-Varnish-Host
X-Platform-Cluster
X-Cache-Info
Ohc-File-Size
Fastcgi-Cache
Arr-Disable-Session-Affinity
X-Rocket-Nginx-Bypass
X-Microcachable
X-Developer
X-Source
X-Device-Type
X-Matrix-Server
X-Cdn
X-Matrix-Proxy
X-UD-Method
X-Magento-Cache-Debug
X-Response-Time
X-PERF
X-LW-Cache
X-ApacheServer
X-Supported-By
Last-Published
X-Application-Context
X-URLSCHEME
X-S
X-Instart-Request-ID
X-HS-Content-Campaign-Id
Generator
X-Hosted-By
X-HOST
X-EdgeConnect-Origin-MEX-Latency
X-Powered-By-360WZB
X-App-Status
X-TransIP-Balancer
X-Track
WZWS-RAY
X-Rnd
X-Gamma-Serve
X-Powered-By-VelaWeb
X-Microcache-Status
Cache-Provider
X-Platform-Server
Pagespeed
X-Translation
X-Shop-Id
X-Defender
X-Storage
X-Varnish-HitMiss
Origin
X-Varnish-Count
X-App-Hosting
X-TransIP-Backend
X-I-Sp
X-Daa-Tunnel
X-BS
X-NetCat-Version
X-Drupal-Cache-Tags
X-RESOURCE
X-Cache-TTL
Akamai-IP
RTSS
Content-Hash
X-Tumblr-Pixel-6
X-WebServer
X-Platform-Cache
X-Duration
X-Pantheon-Phpreq
X-EdgeConnect-MidMile-RTT
X-Pantheon-Environment
X-Pantheon-Site
Surrogate-Key-Raw
X-Powered-By-VTEX-Janus-Edge
X-Flow-Powered
ServerID
X-Varnish-RemainingTTL
X-Dispatcher
X-Route-Server
X-Front
X-Hypernode
X-Varnish-GracePeriod
X-Varnish-ObjectSource
X-Varnish-Seen-By
X-Varnish-RemainingLife
X-I
X-Vcache
X-Server-ID
Cache-Key
USPLoggingUUID
Version
X-Cache-Key
X-Cache-Age
X-Cache-Tags
X-ATG-Version
Lsrequestid
Pool
Allow
X-SV-Edge
X-SV-Pid
X-SV-FromDBCache
X-SV-Nginx-Duration
Content-Disposition
SSPAppContext
X-SV-Duration
X-SV-CreatedAt
Powered-By-ChinaCache
HTTPS
X-Director
X-Expires-Orig
X-Cache-Debug
X-CSRF-Protection
X-ORACLE-DMS-ECID
X-Sapient
X-Page-Cache
X-Ttl
X-SV-Expires
Cneonction
X-Litespeed-Cache
X-Drupal-Cache-Contexts
X-Ezoic-Cdn
MIME-Version
S-Cnection
X-SV-CacheTags
X-SV-Cacheable
X-Cache-Namespace
X-Cache-Operation
X-Firenze-Processing-Time
NnCoection
X-Client-IP
X-Content-Encoded-By
X-Server-Id
X-Generated
SN
Node
X-CJ-Soft
X-Origin
X-Lambda-Id
X-LB-Node
X-Abgroup
X-Debug
Server-Timing
X-Vcap-Request-Id
X-Last-Modified
X-Revision
X-Grace
X-Server-Upstream
X-Amz-Meta-S3cmd-Attrs
X-Varnish-Ttl
FAI-W-FLOW
X-Varnish-Cacheable
X-Magento-Cache-Control
X-Time
Pv
X-Environment
X-SSL-Cipher
X-Akamai-Device-Characteristics
Accept-Encoding
X-Hiawatha-Cache
X-UPSTREAM
X-SDS
IBM-Web2-Location
X-SSL-Protocol
X-Gateway-Cache-Status
X-Bb-Deploy-Id
X-Frame-Option
X-Gateway-Cache-Key
X-Gateway-Skip-Cache
X-Edge-IP
X-Runtime-Rack
X-Varnish-Age
X-Cache-Control-Orig
X-NoCache
Server-Name
X-Yadis-Location
Backend
Req-Id
X-ID
X-Oneagent-Js-Injection
X-PwB-Node
X-TTL
Wsr-Cache
X-Cache-Server
X-WEBSERVER
X-Cache-Expires
AMF-Ver
Location
X-Varnish-Url
X-Content-Age
X-Dispatch
X-Esi
Section-Io-Id
ServerName
Server-Info
X-ARC
Content-Encoding-Handler
Fw-Via
X-Discourse-Route
X-AVG-Country-Code
X-Vhost
X-Avg-Cookie-Expires
X-Magnolia-Registration
X-GUploader-UploadID
X-ORACLE-DMS-RID
X-Goog-Stored-Content-Encoding
X-Cache-Only-Varnish
X-Redman-Backend
X-Akamai-Edgescape
X-Redman-Final-Url
X-Goog-Stored-Content-Length
X-Goog-Metageneration
X-N
Srv
X-Goog-Storage-Class
X-AOL-HN
X-Goog-Generation
X-Varnish-Backend
X-Akamai-Device-Model
X-Cache-Lifetime
S
Content-Transfer-Encoding
X-Amz-Storage-Class
Nodo
X-Content-Security-Policy-Report-Only
IM-Version
X-Varnish-IP
PICS-Label
X-LB
X-IsCacheURL
X-GeoIP-Country-Code
X-Cache-Engine
X-RequestId
W
X-App-Server
Qs-Cache
Fastly-Debug-Digest
Proxy-Connection
X-Cache-Type
Content-MD5
X-Geo-Country
X-Url-Base
X-SRV
X-Nbs
X-Sucuri-ID
SRV
If-Modified-Since
X-Country-Code
X-Speed-Cache
X-Speed-Cache-Key
WWW-Authenticate
X-Always-Cache
X-SO
X-BKSrc
X-Stage
Front
X-Cache-Handler
X-CF-Passed-Proto
Page-Completion-Status
X-Nginx-Cache
X-High-Performance
Cache-Tags
HCVer
X-Real-Server
Accept-Charset
Environment
HAVer
X-Varnish-Retries
CacheControlHeader
Pf.Web.Request.Id
X-BackendServer
X-Cache-Level
Author
X-ServerID
X-Worker
MC
VANITY-HOST
X-Browser
X-SRCache-Key
X-Dynatrace-Js-Agent
X-Frontend
X-VARITI-CCR
Eomportal-Instance
X-Resource
X-Varnish-Server
X-GeoIP-Country-Name
X-Cookie-Domain
X-Middleware-Start
Custom-Header
X-Processing-Time
X-Ruxit-Js-Agent
X-Correlation-ID
X-Cache-Device-Type
X-Pressidium-NinukisWP-Ver
X-Location
X-Rq
X-Empowered-By
X-Shield-Request-Id
Contao-Page-Layout
X-Sucuri-Cache
Cache
Frame-Options
Pics-Label
X-Litespeed-Cache-Control
Cache-Tag
Cached
X-WPL-DATA
X-Source-ID
X-Content-Type-Option
X-HTML-Minification-Powered-By
Cm-Server
X-Dealeron-Backend
X-Cache-CFC
X-Dealeron-Original-Url
X-AF-Userserver
Tracecode
X-DealerOn
X-PF-Uncompressing
X-FTR-Request-ID
X-Unbounce-Variant
Nitro-Cache
X-Airee-Node
X-Rocket-Nginx-Serving-Static
X-Server-Instance
X-Unbounce-VisitorID
X-Srv
X-Cache-Fix
X-Cache-PageType
X-Unbounce-PageId
X-Remote-Addr
X-Proxy
X-Client-Image-Vid
X-EPiphany-Vid
X-Symfony-Cache
X-Purge-URL
NetMindSessionID
X-Purge-Host
X-Cache-Control
X-Framework
X-WebKit-CSP-Report-Only
X-Client-Vid
X-Config-Blacklist-Version
Use-Proxy
IISExport
X-Id
X-HW
X-CDN-Forward
Xc-Version
Cmsid
X-Compress-Hint
X-ACMCache
SEOMOZ
X-Drectory-Script
MJ12bot
X-Atraveo-Set-Cookie
Thanks
X-Cacheable-TTL
Local-Info
Cmstype
X-Env
Identity
X-Atraveo-Param-Rm
X-Atraveo-Expires
X-Atraveo-From-Varnish-Cache
X-Atraveo-ETag
X-Atraveo-Cache-Control
X-Atraveo-TTL
X-Atraveo-Varnish-Server-Id
X-Real-IP
From-Origin
X-Atraveo-Zone
X-Nginx-Host
X-Trace-Id
X-IP
X-Server-IP
X-Session-Reinit
X-FW-Server
X-IIJ-Cache
X-FW
X-Varnish-Hostname
X-Akamai-Transformed
Accept-CH
X-Hit-Cache
NLCacheNote
SVR
X-WA-Info
X-App
Access-Control-Allow-Method
Beyond-Iis
X-Directory-Script
NtCoent-Length
X-Pagename
X-PRAM
X-Force
X-TTFB-L
X-TTFB
X-ClientSide-Caching
X-Ser
X-Garden-Version
BALANCEDTO
X-Fstrz
X-CB-Server
ServerTokens
ServerSignature
X-Locale
Smug-CDN
Ufe-Result
X-SmugMug-Hiring
X-RTag
X-SmugMug-Values
X-W3TC-Minify
X-Sites
X-VC-Enabled
X-Resolver-IP
X-RealServer
X-Cache-Dispatcherpragma
X-Clara-ASAP
Bios
X-Blog
Hummingbird-Cache
X-Adnet
X-NodeID
X-DTC
Machine
Ohc-Response-Time
X-Cache-Dispatchercachecontrol
X-ASAP-Cache
X-Secret
AC-ELC
X-Time-Microsecs
Backend-Timing
X-Dns-Prefetch-Control
X-SERVER-NAME
X-Orig-Vary
X-Plat
X-GeoIP
X-Abuse
Service-Worker-Allowed
X-Page
A-Powered-By
X-Analytics
X-FPC
X-Cache-Doesi
X-Akamai-3PM-SW-Version
SS
Content_type
X-Sys-Req-ID
X-Runtime-Memory
X-LB-Server
X-WR-Flags
X-Fedora-School-Id
X-Request-Uri
X-Akam-SW-Version
X-JG-Page-Cache
X-Resty-Request-Id
X-WN-ClientGroup
SERVER-ID
WN
X-Omnis-SiteID
X-Adobe-Loc
X-Yottaa-Optimizations
X-AEM
X-SmartBan-Host
X-Rewritten-By
X-ManagedFusion-Rewriter-Version
X-Provisioner-Version
X-NginX-Cache
X-Yottaa-Metrics
X-SmartBan-URL
X-Twitter-Response-Tags
Url
NODE
From
X-Adobe-Content
Yoncu-Errno
X-Session-ID
X-ACCELERATE
X-Search-Id
Web-App-Origin-Name
Adm-Server
X-TB-M
X-Connection-Hash
X-Info
X-Unique-ID
X-ServerIndex
X-GoCache-CacheStatus
X-Webstats-RespID
X-Highwire-RequestId
X-Domain-Checked
X-Transaction
X-VC-TTL
X-MCB-Server
X-OpenCart-Lightning
X-Highwire-SessionId
X-Distil-CS
SBGI-10
X-Machine
SHInfo
SBGI-RealPath
SBGI-Device
SBGI-9
X-4ormat-Cacheable
X-Cocoon-Version
SBGI-5
SBGI-RenderTime
Magicmarker
Resin-Trace
Id
SBGI-7
X-DataDome
X-Cache-Via
X-BPool
HitType
Accept-Language
Description
EagleEye-TraceId
X-FireWall-Port
X-Cache-Node
X-Src-Webcache
X-LW-Web-Server
X-Title
Keywords
X-Mobilized-By
Swift-Performance
X-Agent
X-CAPServer
Proxy-Agent
Max-Age
X-Varnish-Debug-Age
X-Varnish-Debug-TTL
X-RiS-UFDI
X-Req-Head-Response
X-Protected-By
RequestId
TheAnswer
SBGI-1
X-BPool-Bx-Cache
Report-To
Myheader
X-PROCESSED-BY
X-Webcelerate
Disablevcache
X-BPool-Fx-Cache
X-BServer
X-Layout
X-Map-Context
X-Powered-By-Home.Pl
X-Key
X-Grid-Server
X-Depends
X-Gannett-Site-Version
X-LP
X-Origin-Server
X-BPool-Back
X-Culture
X-Backend-Status
X-ARRServer
X-Disney-Akamai-Rule
Edit
X-Webkit-CSP
Play-Detected-UserAgent
X-Varnish-Id
Play-Detected-Device
X-WP
Ram
X-Captured
XDomainRequestAllowed
X-Middleton-Pagespeed
X-Highwire-Smart-Code
X-Highwire-Sitecode
X-Jphone-Copyright
X-Route-To
X-Smartcache-Keys
X-Cdn-Forward
X-Distributor
AMP-Access-Control-Allow-Source-Origin
X-Smartcache-Timeout
X-Varnish-ID
X-Serv
Web
SiteSpeed
X-DEBUG
X-Goog-Meta-Goog-Reserved-File-Mtime
Dis-Env
X-Rack-Cors
VServer
X-Balanceador
X-Batcache-Reason
X-Batcache
Fastly-Backend-Name
X-Hosting-Env
Ramp
X-Traffic
Lb
X-EC2-Instance-Id
Server-ID
X-HydroSheep
Device
X-V
Noq
X-SDE-Name
X-A
X-Role
X-Detected-Device
NZSpeedy
X-Amz-Meta-Cb-Modifiedtime
Gzip
ID
OriginServer
Og
NS-VaryByCustom-Key
PagesDisplayed
Nginx-Cache
ClientIP
SG
X-DN-Cache-Control
Paypal-Debug-Id
X-Frames-Options
X-Generated-Time
X-DB-Content-Length
X-MidCOM-Meta-Cache
X-Autoru-Host
X-Autoru-LB
AsisCache
X-Cluster
X-Gyrobase-Publication
X-Application
X-Rebelmouse-Surrogate-Control
X-Rebelmouse-Cache-Control
X-Response
Content-Generator
F5-IpCliente
X-Varnish-Hits
X-Varnish-Cache-Local
X-CACHE-TTL
Edgecast
X-RDP
X-Svr
X-SH-Cache-Status
X-Goog-Meta-Policy
X-Cache-Me-Harder
X-E
X-CacheDebug
X-Compressed-By
X-Confluence-Request-Time
X-Refresh
X-App-Runtime
X-Ghost-Cache-Status
X-GSL-Server
X-Amcomm-Site
X-Amz-Id-1
Cleartype
X-DynamicCache
RN-Server
BackendServer
CommercePlatform-Version
X-Wikidot-Backend
X-Wikidot-Static-Cache
Backend-Name
OracleCommerceCloud-Sandiego
OracleCommerceCloud-Version
X-Header
Dispatcher
X-Hosting
X-JSESSIONID
X-Runtime-Affili
MS-CV
X-Origin-Id
X-AutoRu-App-Id
EN-User
X-Goog-Meta-Replace
X-HashTwo
X-CacheID
X-Dw-Trace-Id
X-Debug-Token
X-Varnish-Action
Upgrade-Insecure-Requests
X-Cache-Time
X-Viator-Tapersistentcookie
X-Data-Request
SINA-TS
X-OPNET-Transaction-Trace
X-Mobile-URL
X-Zendesk-Origin-Server
X-Rewrite
X-Redirector
Prama
X-Zendesk-User-Id
Apachenode
SINA-LB
X-Rack-CORS
X-VNode
X-Processed-By
Traffic-Origin
X-B2f-Not-Route
X-Nginx-Request-Processing-Time
Backend-IP-Port
X-Cjtype
X-Amz-Meta-Content-Md5
Www.Aujourdhui.Com
X-Skip-Cache
X-NginX-Server
X-ReqId
X-Server-Addr
X-Proxy-Skip
X-Node-Id
X-Old-Content-Length
X-Actindo-Thread-Id
X-AMAZEEIO
X-ESI
X-Artvisual-Server
Language
X-ASAP-Age
X-Enhanced-By
X-Aramark-SID
X-DS1D
X-FG-RequestId
X-SCM-Server-Number
X-Proxy-Cache-Key
X-Render-Time
X-UnsetCookies
X-Varnish-Grace
X-Cache-TTL-Age
DrivedBy
Hostname
Warning
X-Cache-TTL-Current
X-Who
X-ZSITES-DNS
X-SilverStripe-Cache
X-Actindo-Rs
X-Geo-IP
Hamster
TZ-Server
COMMERCE-SERVER-SOFTWARE
CLMOB
SB-Cache-Remaining
Ibf5scheme
SB-Cache-Life
ScoreTracker
MW-Webserver
Proxy-Cache
Il-Cl
X-HP-Trace-Project
Page-Template
Home
X-CRA-DC
Provider
X-Varnish-Cache-Ttl
X-MAT-GEO
X-HP-Trace-ID
Cteonnt-Length
X-Actindo-Request-Id
X-Node-Name
Access-Control-Allow-Header
X-Desc
X-XHTML-Minification-Powered-By
SB-Site-Device
N365rili
SB-Site-IE-VERSION
X-Cache-On
Xc
X-HS-Status
X-Forwarded-Host
X-AISO-Cacheable
X-PM-ID
X-Dev
X-Cache-Varnish
X-Cms-Mode
X-Origin-Cache
X-Cache-Detail
X-AISO-Server
X-LBPoolMember
X-AISO-Cache
Viewport
Ews
TP-L2-Cache
TP-Cache
X-Author
Ttl
X-Sid
X-Reflector-Cache
X-Reflector
X-Magento-Action
Worker
VC-NoCache
X-Magento-Lifetime
PServer
Strikingly-Cached
Strikingly-Cached-Version
X-Client-Ip
Ctx
MyHeader
Aoestatic
X-Tag-Playlist
X-Lb
Strikingly-Cache-Region
X-Upgrade-Enabled
X-NID
X-CGP
X-AWS
X-Built-With
Progma
X-B3-Traceid
X-B3-Spanid
Load-Balancer
X-Bcwwwid
NKBVHEADER
HA-Cloudapp
X-SE-Debug
X-CACHE-KEY
X-Clx-Request
X-SuperCache
X-Uncacheable
X-VG-WebCache
X-UType
X-Proxy-Id
X-PoweredBy
X-DDM-SERVER-UPDATED
X-Hash
X-Distributed-By
X-MSU-SOURCE
X-DDM-SERVER
X-Phpwcms-Release
X-Phpwcms-Page-Processed-In
X-Bip
XX
HA-Ipaddr
HA-Host
HA-Georegion
HA-Servedtime
HA-Urlpath
Kanooh-Host
IES-Server
Unique-Request-Id
HA-Geolon
X-7d-Trace-Id
DB-Nickname
BlockPHPCallEnd
X-7d-Instance-Id
HA-Geocity
HA-Geolat
HA-Geocountry
L5d-Success-Class
X-Pubstack
X-ProcessESI
X-RemovedCookies
X-Original-IP
X-Obvious-Tid
X-Obvious-Info
X-RequesterIP
X-SATserver
X-Ants-Machine-Id
X-Ants-Host
CDCHOST
X-TA-CDN-Provider
X-Instance
X-Feed
X-Server-Generated
X-Proto
X-Meta-MSThemeCompatible
X-Meta-MSSmartTagsPreventParsing
X-SV
Dtk-Cache-Check-0
WSCLoggingUUID
Tk
Request-EU
Request-Country
X-Cache-Ttl
X-COUNTRY-CODE
X-Max-Age
X-Global-Transaction-ID
X-Flex-Tags
X-Flex-Tag
Requested-Host
X-Nginx
X-We-Are-Hiring
X-Profiler
X-PressLabs-Stats
X-Pool
X-Flex-Lastmod
X-Flex-Lang
V-TTL
HSTS
X-Test-Debug
X-Custom-Name
X-Backside-Transport
X-CD
X-Flex-Evstart
X-Flex-Evend
X-Flex-Community
X-Device-Item
X-Meta-Imagetoolbar
X-Dynamic-Cache
X-S-Misc
X-PHP-Response-Code
X-PG
X-Pagely-Cache
X-Script
X-ServerAddr
X-UPServer
X-Streams-Distribution
X-Sn-Servicetimems
X-ServiceProvider
X-OpenUrlRewriter-Debug
X-OCTOPOD
X-Generation-Time
X-FreeTag-Count
X-Fpc
X-D-Time
X-HAProxy
X-Homeaway-Requestmarker
X-Nitro-Cache
X-Member
X-MCF-ID
X-Jcms-Ajax-Id
X-Varnish-Cached
X-Varnish-Cached-TTL
Expiries
Debug-Status
CS-SERVER
X-Unique-Id
MSSmartTagsPreventParsing
MSThemeCompatible
WP-FROM-CACHE
Session-From
ServerIP
Server-Ip
X-Node-App
X-Hit
TC-Cache
Response-Time
Xcache
X-XHR-Current-Location
TC-Cache-IC
TC-Cache-U
X-CO-Host
X-Cache-Bypass
TC-S-Cache-M
TC-S-Cache
X-Config-By
Server-Id
X-Gateway-Rate-Limit-Delayed
X-Gateway-Rate-Limit-Conn
X-ETag
X-HEAD
X-Header-Treatment
X-Pj-Cache-Status
X-Made-On
X-M
X-Deity
X-Debug-Token-Link
RSB-LINK
HostName
GranicusServer
X-Apm-Telemetry-Syncmark
X-Beatles
X-CSRF-Token
X-Cname-TryFiles
X-Cache-ID
X-Served
X-Sorting-Hat-Expire-Cache
MageStack-Loadbalancer
MageStack-Debug
MageStack-Config
MageStack-Magento-Version
MageStack-PageSpeed
Request-Filtered-By
MageStack-Web-Node
MageStack-Tag
MageStack-Cacheable
MageStack-Cache-Status
Generate-Time
1A-CountryCode
X-Varnish-Debug-Hits
IsMobile
MageStack-Area
MageStack-Cache-Lifetime
MageStack-Cache-Hits
MageStack-Cache
EQ-Cache
Be
X-VC-Cache
X-Static
X-NMT-Proxy
X-VC-Cacheable
X-VC-Debug
CpuTime
Cacheid
X-VC-Hash
DeleGate-Ver
X-Ssl-Cipher
MwpReleaseVersion
MachineName
Container
X-Status
X-Timestamp
X-Site
X-PBY
X-Pass-Through
User-Agent
V-Age
X-Route
X-Pixelsilk-Version
X-Pixelsilk-Server
X-Served-Server
X-Shopware-Allow-Nocache
X-VCS-Ttl
X-VCS-Cacheable
X-Shopware-Cache-Id
X-Full-Url
X-DSMX-Rewrite-MS
X-Cache-Id
X-ACLR-Version
X-Ab-Selection
X-Cache-Original-TTL
X-ClusterID
X-DSMX-Render-MS
X-Custom-Header
Tesla.Performance
X-Activity-Id
X-PBS-Appsvrip
X-Nginx-Request-Time
X-NewsFlow-Sitename
X-PBS-Appsvrname
X-PBS-Fwsrvname
X-Svr-Proxy
X-SSLUpstream
X-SSLProxy
X-MyName
X-Instance-Id
Session-Id
ReqUrl
ProxiaInstanceId
X-Cache-FS-Status
X-Catalyst
X-HP-CAM-COLOR
X-Healthy
X-Container
X-UPSTREAM-Address
X-Via-NSCOPI
X-M-Log
X-Log
X-KoobooCMS-Version
X-M-Reqid
X-Qiniu-Zone
X-Reqid
X-REDIRECTSERVER
X-Qnm-Cache
X-Hstore
X-Hrouter
Fastly-Restarts
Actual-Object-TTL
X-WebNode
FRONT-END-SECUREBROWSER
X-Avvio-Cms-Cacheload
X-Cache-Extended
X-Box
X-Backend-Host
XDisk
X-Transaction-Name
X-Say-Cacheable
X-ProBase-Server
X-Ocache
X-Say-TTL
X-SayCDN-TTL
X-UA
X-T
X-Serverid
X-NewCloud-V-Cache
X-HA
X-Az
X-AppVersion
X-Amz-Meta-Version-Id
X-B
X-Backend-TTL
X-FastCGI-Cache-Status
X-Debug-Message
X-BP-NSA-REQID
X-UT-Cache
Amfplus-Ver
X-Instart-Cache-Id
X-Front-Cache
X-FIRSTBase
X-IP-Address
X-Litespeed-Tag
X-RAMCache
X-Pool-Info
X-Pageid
X-Country
X-CH-Device
HA-Front
Copyright
CommunityServer
Provided-Host
Referer
X-Beresp-Ttl
RSL-Trace-ID
X-VTEX-Cache-Status-Janus-Edge